Question
An organization is developing and implementing AI features into a customer service application. Which of the following practices should the organization put in place before releasing the application for customer trials?
- A. Data masking and sanitization Correct
- B. External compliance audits
- C. Approved AI vendor lists
- D. Third-party risk management
Explanation
Before customers try the application, the organization should mask and sanitize the data the AI features are trained on and can reach, so that sensitive or personal information is not exposed through model output and inputs are cleaned of harmful content. This is a technical safeguard that directly protects trial users. External compliance audits, approved AI vendor lists and third-party risk management are governance activities that do not by themselves stop the application from leaking or mishandling data.
